assets.hospitals.southerncross.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:2b:3c:6f:24:e0:ce:f6:d6:73:31:62:98:92:e6:03:bf:8e was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=assets.hospitals.southerncross.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:3c:6f:24:e0:ce:f6:d6:73:31:62:98:92:e6:03:bf:8e
Serial Number (int): 363161616277317639288803232081388161449870
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:dd:f5:3b:87:ca:89:ba:bc:09:f3:9e:e2:c2:4a:41:ae:1f:3f:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:4c:cd:eb:bc:1b:9b:2f:19:e5:b7:96:4b:9b:67:d8:d9:9c:df:6f
Fingerprint (sha256): 67:d3:ec:37:db:6f:12:93:56:a3:9c:9f:00:0c:5d:2c:d9:d8:3e:3c:64:f2:ef:b0:7b:e4:99:cb:ee:20:a2:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assets.hospitals.southerncross.co.nz

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.hospitals.southerncross.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.hospitals.southerncross.co.nz
gillieshospital.co.nz
healthcare.southerncross.co.nz
hospitals.southerncross.co.nz
southerncrosshealthcare.co.nz
southerncrosshospitals.co.nz
southerncrossqe.co.nz
sxhospitals.co.nz
uat.healthcare.southerncross.co.nz
www.gillieshospital.co.nz
www.hospitals.southerncross.co.nz
www.southerncrosshealthcare.co.nz
www.southerncrosshospitals.co.nz
www.southerncrossqe.co.nz
www.sxhospitals.co.nz

Other certificates including the domain name southerncross.co.nz

(limited to 100 certificates)

hospitals.southerncross.co.nz
npos.southerncross.co.nz
brandkit.southerncross.co.nz
identity.southerncross.co.nz
apply.southerncross.co.nz
u.southerncross.co.nz


brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
sam-facade.southerncross.co.nz
aplogo.southerncross.co.nz
hospitals.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
easyclaim.southerncross.co.nz
kete.southerncross.co.nz
beingwell.southerncross.co.nz
careers.southerncross.co.nz
providers.southerncross.co.nz

hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
southerncross.co.nz

southerncrosshospitals.co.nz
brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.ts.southerncross.co.nz
*.api-sit.southerncross.co.nz
brandkit.southerncross.co.nz
aplogo.southerncross.co.nz
jobs.southerncross.co.nz
aplogo.southerncross.co.nz
*.api-sit.southerncross.co.nz
customer360.pr.southerncross.co.nz
gateway-orb.southerncross.co.nz
assets.hospitals.southerncross.co.nz
identity.southerncross.co.nz
easyclaim16.ts.southerncross.co.nz
identity.southerncross.co.nz
uat.hospitals.southerncross.co.nz
identity-signing.southerncross.co.nz
aplogo.southerncross.co.nz
*.southerncross.co.nz
schs-workflow.southerncross.co.nz
hospitals.southerncross.co.nz
identity-pp.southerncross.co.nz
viewpoint.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.api-sit.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
uat.hospitals.southerncross.co.nz

my.southerncross.co.nz
*.surfly.southerncross.co.nz
email.southerncross.co.nz
*.mapi-sit.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
uat.hospitals.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
*.southerncross.co.nz
*.api-dev.southerncross.co.nz
gateway-orb.southerncross.co.nz
hospitals.southerncross.co.nz
gateway-bri.southerncross.co.nz
aplogo.southerncross.co.nz
aplogo.southerncross.co.nz
mapi.southerncross.co.nz
*.beingwell.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
www.southerncross.co.nz
www.viewpoint.southerncross.co.nz
brandkit.southerncross.co.nz
viewpoint.southerncross.co.nz
easy-claim-help.southerncross.co.nz
api.switch.southerncross.co.nz
careers.southerncross.co.nz
*.api-test.southerncross.co.nz
assets.hospitals.southerncross.co.nz
*.switch.southerncross.co.nz
www.southerncross.co.nz
assets.hospitals.southerncross.co.nz
api.beingwell.southerncross.co.nz
agm.southerncross.co.nz
kete.southerncross.co.nz
healthcarefinder-pp.ts.southerncross.co.nz
brandkit.southerncross.co.nz
*.api-sit.southerncross.co.nz
api-pp.southerncross.co.nz

Certificate

The complete raw certificate details for assets.hospitals.southerncross.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV1MHIJxnXhkaJw1qlQg
9nC1nHzFTcX224/RUENsCEhEArfqjQ2FK6fKgS73y2IvWG2VY9uxHpNZwjKtKBdL
UjBoCxXSW4wuXH5k00E+Mkhhd0hamdX3f2e0fJHvGXKpbeeeCdzHwYG+4RjGYipt
7Y5U90UuQWd6mYUio91fhFzZBLGuTkRKI7Z8Lg+RS1o4t3KIIjAyUkotSVarkZ+b
GdIHcF9/jMtlrHYsRsJpahz8N7loQu8EE5aMCP9dcSuwaRLHtUcYOpPQaDGQyPHT
hXyCnWfuDK/5emxD+7UKIcSikRYoVhmOyWJkB3Id9VibpDPlzfanfiG1w/Zz0jFi
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363161616277317639288803232081388161449870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 07:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 07:39:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23905046256846653566572216690985765182118117257706723066662643314928076968612386280947446993018001990191696650883585085504607839745837555497782282466172014141268049996799002090964540996112611522048029393982391154240886759491858977186200849757828582699901122814179092446361869945977454648539416731267650909348393846133303654101664540176775004236872910295856579867397056935923037166216116380548800987588585831314988374918009125561296708066659641790838959313038590350077233759919215509636802302691335748734892050157444075452248260432646376083469191135896253510837031271949856988349500945228804399143080432392665398600417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ddf53b87ca89babc09f39ee2c24a41ae1f3faf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac65833450000040300473045022100d2f8bc7e0f9d09c13568ad25b4d0e6cd312d713f35980b1c777135788750734d02207df4fedaf0a19d6ac1443ea343a02e55464287555a33eee135c79b1572a9b2a8007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac658339d0000040300483046022100a0e88478733e7c9e9b689a522a77cd7f13f0eebf902116ab0812b39866b9cf11022100fa4bbc07049902eaa52463b87d2884b3a56d2de4602a0762b05d41daa105aecf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ff8c23ef0703c630842825409d9b0d8d1dd3ab45e4023fb68a5ef9b83bcc3cecdb66f5c2e7b14b55d5103de1dbe83a51fd5d9acd189d33f1a6b4666eb2439060da8782d488ac924db785175e037dd330221886a5a213f40f96d7ee760e8197e0521a22c384cb18154ba2335b8218515d5badbadb28eddf36c5098d9ace7d160b79c693a589b6b413d53c765db621d52d0379b5da44380897f3a72cca8bff8ffa83b24c582cacbaa2cb442aa0b653f31d78a3f98b526a6c007dbc6f88ff049960d79500ab50d83b42de9cd2e04f60486ae7b6a0f98be52ee1f34dc5f10d7d354c00bf06948421b03a8f1b9351abed5ce41f0a6aea34b4d511f7445a338c1be18